CVE-2012-6709

low-risk
Published 2018-02-23

ELinks 0.12 and Twibright Links 2.3 have Missing SSL Certificate Validation.

Do I need to act?

-
0.19% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
5
CVSS 5.9/10 Medium
NETWORK / HIGH complexity

Affected Products (2)

Elinks
Links

Affected Vendors

Elinks Twibright

References (4)

Issue Tracking https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=694658
Issue Tracking https://bugzilla.redhat.com/show_bug.cgi?id=881399
Issue Tracking https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=694658
Issue Tracking https://bugzilla.redhat.com/show_bug.cgi?id=881399
26
/ 100
low-risk
Severity 18/34 · Moderate
Exploitability 1/34 · Minimal
Exposure 7/34 · Low